CVE-2026-6890

View on CVE.org
Published Jul 31, 2026 CVSS n/a EPSS n/a KEV · Not listed
Description
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
References

No reference.

History
Type Values Removed Values Added
First Time appeared Advantech
Advantech ecu-1251d08.04
Vendors & Products Advantech
Advantech ecu-1251d08.04
Type Values Removed Values Added
Description A use of default credentials vulnerability in the Advantech ECU-1251D allows a remote attacker to gain unauthorised access to the device via SSH using the default root account with no password, as documented in the device manual. No prompt or guidance to change these credentials is provided during device configuration, increasing the risk of exploitation. This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Title Use of default credentials vulnerability
References
Metrics cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}
Type Values Removed Values Added
Description A use of default credentials vulnerability in the Advantech ECU-1251D allows a remote attacker to gain unauthorised access to the device via SSH using the default root account with no password, as documented in the device manual. No prompt or guidance to change these credentials is provided during device configuration, increasing the risk of exploitation.
Title Use of default credentials vulnerability
References
Metrics cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}
Weaknesses

No weakness.

Sources

Status
REJECTED
Assigner
CSA
Published
Updated
Jul 31, 2026, 5:09 AM
Reserved
Apr 23, 2026, 2:58 AM

View source JSON

No data.

Status
Rejected
Published
Jul 31, 2026, 3:16 AM
Modified
Oct 16, 2026, 3:10 PM

View source JSON

No data.

No data.